Privacy Policy

Scratchpaper is operated by Crave Digital, Inc. This policy explains what we collect, what we don't, and why.

What stays on your device

Your grade, your school choice, your saved classes and your notes are stored in your own browser. They are not sent to us. Clearing your browser data — or tapping Start over in the app — erases them.

Your saved work — flashcards, quizzes, summaries, study plans and homework walkthroughs — also stays in your browser. If you sign in, a copy is kept with your account so it follows you to another device; deleting a saved item, or your account, deletes that copy too. If you never sign in, it never leaves your browser.

Your study weeks — Scratchpaper counts the nights you studied so it can tell you which week you are on and how many points you have. For that it keeps a short record of each real study action: the date, what kind of thing it was (a walkthrough, a quiz, a deck, a tutor conversation, or that you wrote the last line yourself) and the name of the concept it was about. Never the problem, never your answer. The record is tied to the identifier your browser already has; if you sign in, it is tied to your account instead so it follows you to a new device. It is used only to count your weeks and never for advertising or anywhere else on the web. It is deleted with your account, or 18 months after a browser that never signed in was last seen.

What reaches our servers

• What you ask. Your questions, pasted notes, and any worksheet photo you upload are sent to our servers and passed to our AI provider (Anthropic) so it can answer. Anthropic does not use this to train its models.
• A record of the session. We keep a log of what was asked and what was answered so we can find bugs and check the tutor is behaving — specifically, that it is not handing out answers. This is student work, and we treat it that way.
• Basic technical data such as timing and error information.
• Totals, not people. We turn these records into de-identified, aggregate statistics — how many students used Scratchpaper, how often they came back, what share of problems they worked through without being given the answer — and use them to run and improve the service and to report on it, including to investors. These reports never include a student’s name, their work, or what they asked.

Signing in

You can start without an account: your first walkthrough, deck or conversation doesn't need one. To keep going after that, and to save your work so it follows you to another device, students 13 and older sign in. We ask when you were born (month and year) and then, if you are 13 or older, for an email address. We send a six-digit code to that address; typing it in signs you in. There is no password.

• What we keep: your email address, encrypted; when you signed in; which browsers belong to your account. We use the address to sign you in, to tell you about your account, for reminders you turn on, and — if we ever charge for something — for receipts. Nothing else. We do not sell it and we do not use it for advertising.
• What we don't keep: your birth month and year (they only decide which sign-in path you see), your name (it stays on your device unless you send a parent report), or any password.
• Your browser's session. Scratchpaper sets one cookie, a random id, so your browser is recognised between visits and your work can be counted and saved. We use it only to run the service — to sign you in, to save your work, to count how many students use Scratchpaper and whether they come back. It is never used for advertising, never shared, and never used to follow you to other websites.

Voice

When you talk to the tutor, speech recognition runs inside your browser using your device's built-in capability. We never receive your audio. Only the resulting text is sent, exactly as if you had typed it.

Students under 13

Scratchpaper is built for grades 6–12, which includes students under 13. A younger student can use everything on Scratchpaper without giving us personal information — without an account, a name or an email, and with voice handled on-device.

If a student under 13 wants to save their work, we ask for a parent or guardian's email address — never the child's — and email the parent a notice that explains what we would keep and why. Nothing is kept until the parent says yes on the page that notice links to; we then send a second email confirming it. If the parent does not answer within 14 days, we delete their email address and keep nothing. We never email a child, and a child's account has no name, no photo, no friends list and nothing public.

Parents: the link in your confirmation email is your page. From it you can see what we hold about your child, delete it, or withdraw your okay at any time — withdrawing deletes your child's account, their saved work, and your email address. You can also email hello@cravedigital.co.

If you believe your child has given us personal information another way — for example by typing it into a question, or a name on a photographed worksheet — email us and we will delete it.

Progress reports to a parent

A student can choose to send a parent a summary of their own work — how many problems they worked through, how often they were given the answer, and which classes. To do that we ask for the parent's email address and the student's first name, and we store them so we know the report was sent.

We send that report once, when the student asks us to. We do not create an account for the parent, we do not add them to a mailing list, and we do not email them again unless they ask us to. The report contains the student's own activity and nothing else. To have a parent address deleted, email hello@cravedigital.co.

Sending a deck to someone

Your saved flashcards, quizzes and summaries stay in your own browser. If you tap Send these cards, that one deck — and only that one — is copied to our servers so we can give you a link that opens it on someone else's phone. Nothing about you travels with it: not your name, not your school, not which browser made it. Anyone with the link can open the deck, so don't share one that has personal information in it. We delete shared decks after 180 days, or sooner if you email us the link.

School requests

If you ask us to add your school, we store the school name and, only if you choose to provide them, a city and an email address. We use this to decide which school catalog to build next, and to tell you when yours is ready. Nothing else.

Who we share with

We do not sell your information and we do not run advertising. We share only with the providers that make the service work, and only as needed to run it: Anthropic, whose AI writes the replies, receives each question only to answer it and does not use it to train its models; Resend delivers our email; DigitalOcean hosts the server. None of them may use your information for anything else. No one else receives it. We will disclose information if the law requires it.

Scratchpaper is made for school use, and California's Student Online Personal Information Protection Act applies to us: we do not advertise to students, we do not build profiles of students for anything except helping them with school, and we do not sell student information.

How long we keep it

• Your account (13 and older): while you use it, and 18 months after your last sign-in. We email you once before deleting it.
• A child's account: the same, and immediately if a parent asks.
• A parent's email given for consent that never came: 14 days.
• Sign-in codes: 24 hours.
• Study-week records (date, kind of action, concept name): with the account, or 18 months after a browser that never signed in was last seen.
• The record that a parent consented, or that an account was deleted: three years after the account is gone, because we may need to show it.
• Session records (what was asked and answered): while we are actively developing Scratchpaper, reviewed every September, deleted when no longer needed.
• Aggregate statistics, which contain no student’s identity or work: kept.

You — or your parent — can ask us to delete anything associated with you at any time, and we will within 30 days: from the parent page, or by emailing hello@cravedigital.co.

Security, honestly stated

We take reasonable measures to protect what we hold, but no service is perfectly secure. Please don't type sensitive personal information into a homework question — you don't need to, and we'd rather not have it.

Contact

Questions, deletion requests, or anything else: hello@cravedigital.co.